To address CVE-2013-1571, users hosting publicly facing Java API Documentation generated with javadoc 5u45, 6u45, 7u21, or earlier are strongly encouraged to re-create the Java API documentation using javadoc from 7u25 or above. Alternatively, for convenience of users and for those who have further modified the generated documentation, Oracle provides the Java API Documentation Updater, a repair-in-place tool. Source code is available if you have a non-standard environment. The Java API Documentation Updater Tool is a separate download and not included in any JDK/JRE bundles.

New JAR Manifest File Attributes

JDK 7u25 release introduces the permissions and codebase attributes in the JAR Manifest File. These attributes are used to verify that the application is requesting the correct permissions level and is accessed from the correct location. See Preventing the Repurposing of an Application document.

Developers are advised to utilize at least the new permissions attribute, and if possible the codebase attribute as well. In future releases, applications that do not include these protections may be blocked or subjected to additional warning dialogs.

Does anyone know where to get the src zip of the JDK for version 1.7.25.b17 of Java update 25 of version 7 of Java? I have an older version of the source that I would like to update. It's probably about 20 or 30 MB or so zipped up. I have the JDB and JRE installed. I have the 3D stuff from 1.5.2 which is the latest - I just don't have the src directory source files for the JDK.